OSHA’s Access to employee exposure and medical records standard, 29 CFR 1910.1020, stipulates the requirements for medical and exposure records. The requirements for how to keep these records as well as the retention of these records is specified in this standard.
29 CFR 1910.1020(c)(6) defines an “employee medical record” as a record concerning the health status of an employee which is made or maintained by a physician, nurse, or other health care personnel, or technician, including various records further defined in this section. There are numerous requirements stipulated in this standard, but employee medical and exposure records must be kept for the duration of employment plus 30 years. If the company closes, all records must be transferred to the successor. If there is no successor, current employees must be notified of their right to access their medical records at least 3 months before the closure.
There are other standards that stipulate additional recordkeeping requirements so be sure to reference the specific standard in addition to this standard.